CNNVD-202508-1060 Information

CNNVD ID

CNNVD-202508-1060

CVE-2025-8297

  • CNNVD Published: 2025-08-12

Description (Chinese)

Ivanti Avalanche是美国Ivanti公司的一套企业移动设备管理系统。该系统主要用于管理智能手机、平板电脑和条形码扫描仪等设备。 Ivanti Avalanche 6.4.8.8008之前版本存在代码问题漏洞,该漏洞源于配置限制不完整,可能导致远程代码执行。

Description (English)

Ivanti Avalanche is an enterprise mobile equipment management system for Ivanti, United States of America. The system is used mainly to manage equipment such as smartphones, tablets and bar-code scanners. Ivanti Avalanche 6.4.8.8008 had a code problem loophole, which stemmed from incomplete configuration restrictions and could lead to remote code implementation.

Hazard Level

Medium

Vulnerability Type

代码问题

Affected Vendor

Ivanti

Published

2025-08-12

Last Modified

2026-02-24

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-CVE-2025-8296-CVE-2025-8297?language=en_US

Patch

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-CVE-2025-8296-CVE-2025-8297?language=en_US

Share on: